Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: ImtjZRo9hWhoqVBDUbghy3aU9mxjx7fCRIHOxiOWkP0=
Subject key identifier: C1:CE:9B:62:9B:8E:60:1F:C3:0E:C0:3D:86:5A:34:1E:26:0A:16:9E
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 01A0C332555BD843215110AC833EB026F15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0EE3
Signing time: Mon 21 Sep 2026 09:00:50 +0000
Manifest this update: Mon 21 Sep 2026 09:00:50 +0000
Manifest next update: Tue 22 Sep 2026 09:00:50 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: 6J5uAHvvJttCN5oCmC3OWlOBURpn4sXDvSeAZ919uSs=)
2: ToM6N48G8WGMzFpuQ0Gt_pOWEHc.roa (hash: f5NlaoVCrJ+ZbPHrxjLY8hxzqQ0aKUh9p8kFFA8E7Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:55:5b:d8:43:21:51:10:ac:83:3e:b0:26:f1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Sep 21 09:00:50 2026 GMT
Not After : Sep 22 09:00:50 2026 GMT
Subject: CN=c1ce9b629b8e601fc30ec03d865a341e260a169e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dd:44:54:2f:76:63:ed:15:5a:25:78:71:c0:
a9:81:b9:16:18:3f:71:39:97:ad:8c:4f:74:2b:77:
27:2c:b3:9a:a8:fd:54:ca:1a:19:a3:34:76:34:8d:
ce:4b:26:04:ed:80:d4:a2:65:68:de:e1:ff:99:88:
2b:c3:ea:09:e5:4a:11:ef:9c:1c:b6:af:89:54:eb:
84:f3:d4:67:48:70:e6:1d:42:ac:f3:35:0a:0b:ad:
9b:3e:a6:08:1f:17:c3:dc:22:47:2e:ac:86:5a:54:
cd:7c:0f:60:6c:2f:6a:85:03:92:72:97:1b:6d:6e:
5a:4b:c1:0c:b8:e6:33:62:6a:11:a2:c2:df:39:db:
a3:1a:b4:bf:72:47:15:98:93:96:46:2f:f1:16:07:
97:33:52:24:db:6e:45:c9:cd:7c:54:7d:ab:82:e1:
59:3b:32:b2:55:78:7e:56:6b:d7:12:73:c3:c4:74:
ac:68:c7:d5:96:3e:02:6b:c8:d7:f9:f0:48:03:f3:
e1:4a:2f:77:30:27:b8:e2:65:88:89:08:05:f0:5e:
9e:e1:5e:69:9b:2a:48:71:d8:c7:4f:6e:a5:c4:63:
bc:90:fe:19:31:d3:69:72:77:85:c4:0b:cd:f2:3e:
7c:33:42:c4:ba:96:19:4c:6e:9f:a8:25:41:0e:64:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CE:9B:62:9B:8E:60:1F:C3:0E:C0:3D:86:5A:34:1E:26:0A:16:9E
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c8:33:51:dd:f1:6b:49:8e:49:00:1d:69:9e:ec:3b:60:90:
05:e4:81:10:62:61:27:b1:40:1e:3f:66:63:6e:cc:b8:6c:4a:
fa:92:e9:0c:3d:db:84:8e:09:a1:0d:be:d0:3a:17:9e:ec:c1:
32:15:10:f8:1b:99:42:ae:46:ae:b6:be:24:0f:ff:19:1a:98:
53:1e:74:2e:21:c9:6f:40:af:0d:96:12:40:ae:85:24:5e:d3:
63:aa:80:f5:97:a8:f7:de:f8:89:41:23:d7:70:79:60:71:cb:
c5:9b:10:7d:98:a4:79:95:3c:42:78:f8:db:9c:de:48:c7:07:
a9:28:ce:7d:d1:4a:5e:44:1d:0a:f6:c7:ca:5a:9b:db:2e:24:
19:b4:25:76:24:0e:c2:00:80:42:aa:5b:1e:4e:4a:8c:07:46:
6b:35:93:4e:f5:54:0e:bb:75:1d:be:96:32:67:18:91:e1:4a:
5c:82:9d:cd:9e:82:18:12:fd:df:b0:e3:1d:1a:87:8b:2b:c5:
b1:8b:4c:1f:ec:a6:fb:1a:43:b1:59:e9:85:0a:f0:cb:f2:02:
6f:00:b6:5b:12:85:5f:7b:cd:c0:0e:20:a8:fd:ae:ec:37:fe:
f6:d0:55:fa:af:94:ee:39:7f:d5:c1:62:89:42:97:4a:13:47:
b5:94:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:36:33 2026 by rpki-client